Companion article · Season 1, Episode 1 · By Felix McKenzie
Information current to October 26, 2026. The Belgian criminal investigation remains ongoing. The subject is presumed innocent.
On July 24, 2026, Belgian authorities arrested a Canadian woman who had been working at NATO's principal military headquarters in Mons, Belgium.
The arrest followed police searches conducted the previous day at her accommodation and workplace.
Belgian federal prosecutors announced that the woman was suspected of espionage on behalf of a third country and participation in a criminal organisation.
They did not publicly identify the country involved.
The suspect was subsequently identified in media reporting as Biwei Zhang, also known as Claire Zhang, a 33-year-old Canadian researcher with previous employment in several federal government institutions.
At the time of her arrest, Zhang was working as an intern in the information technology department of Supreme Headquarters Allied Powers Europe, commonly known as SHAPE.
SHAPE is NATO's principal military command headquarters in Europe. It supports the Supreme Allied Commander Europe and the planning and execution of alliance military operations.
The position places SHAPE at the centre of NATO's military command structure.
The allegations against Zhang therefore attracted attention well beyond Belgium.
They also raised questions in Canada about the procedures used to grant security clearances to personnel working in sensitive international institutions.
Those questions would become the subject of parliamentary hearings.
Before arriving in Belgium, Zhang had accumulated a professional history involving scientific research, data analysis, engineering, and public administration.
According to her reported employment history, she worked at Canada's National Research Council during the summer of 2017, followed by Statistics Canada in 2018.
She subsequently worked at Employment and Social Development Canada in early 2019 and returned to Statistics Canada in May 2020.
Her academic qualifications included a master's degree from the University of Ottawa, completed in 2022, in a field involving computer science and systems engineering.
Her reported international experience included work at the European Space Agency's research centre in Italy in 2022 and an internship at the World Trade Organization in Geneva in 2023.
She also worked at the Canadian Space Agency in a systems engineering role associated with satellite operations.
These positions involved organisations with different responsibilities and different security requirements.
Employment in a technical or government institution does not, by itself, establish access to classified information.
Nevertheless, Zhang's professional history was relevant to the subsequent debate over how Canadian authorities assessed her suitability for work at NATO.
In July 2025, she began an internship at SHAPE.
The original placement was expected to last six months but was reportedly extended to approximately one year.
Global Affairs Canada sponsored the placement and issued the security clearance required for her assignment, following security checks involving the Canadian Security Intelligence Service and the Royal Canadian Mounted Police.
The clearance was reportedly consistent with the Secret level normally associated with this type of NATO internship.
The precise information available to individual screening officials at the time has not been publicly established.
One part of Zhang's employment history had already been examined through a Canadian administrative proceeding.
In March 2019, she submitted two applications for a position with the Canada Border Services Agency.
She subsequently took the same civil-service examination on consecutive days.
The examination rules prohibited candidates from taking the same test more than once within a 180-day period.
The Public Service Commission investigated the circumstances.
In 2023, the commission found that Zhang had committed fraud by taking the examination twice and failing to disclose that fact when directly questioned.
Importantly, the commission separately concluded that she had not acted dishonestly merely by submitting two applications.
Zhang challenged the administrative finding through judicial review.
In 2024, the Federal Court upheld the commission's decision.
This was an administrative finding of fraud, not a criminal conviction.
Zhang was not convicted of a criminal fraud offence, and she never worked for the Canada Border Services Agency.
The distinction matters.
The earlier proceeding did not establish espionage, foreign influence, or any connection to the allegations subsequently investigated in Belgium.
Its significance to the NATO case concerns a narrower institutional question.
A publicly accessible court decision existed concerning conduct relevant to an applicant's honesty and reliability.
When Zhang later received a security clearance, that decision apparently did not become part of the information considered through the normal screening process.
Canadian officials would subsequently acknowledge that the process had limitations.
Following the arrest, Canada's House of Commons Standing Committee on Public Safety and National Security began examining the federal government's security screening procedures.
On October 5, 2026, Public Safety Minister Gary Anandasangaree acknowledged gaps in the clearance process.
Further testimony followed on October 21.
David Morrison, Prime Minister Mark Carney's senior diplomatic and international affairs adviser and a former deputy minister of Global Affairs Canada, explained that open-source searches were not a required part of the relevant screening process when the clearance was issued.
In practical terms, the process did not require officials to search publicly available internet sources for potentially relevant information.
Morrison said the procedure had since been changed.
He also emphasised that the established protocols had been followed when the clearance was granted.
This produced an important distinction between procedural compliance and the adequacy of the procedures themselves.
A screening process can be completed according to its written requirements while still failing to consider information that might be relevant to a security decision.
Morrison told parliamentarians that procedures needed strengthening if compliance with existing rules could nevertheless produce an unintended result.
He suggested more consistent open-source verification, improved information sharing between departments, and continuing assessment of security clearance holders.
The hearings did not establish that any particular official knowingly disregarded adverse information.
Nor did they establish that the earlier administrative finding would necessarily have prevented Zhang from obtaining clearance.
The central issue was whether the system had been designed to make relevant information available to decision-makers.
According to an investigation by the European reporting consortium involving Follow the Money, Le Soir, Knack, and La Lettre, NATO counter-intelligence personnel and Belgian security services began taking an interest in Zhang within weeks of her arrival.
The consortium reported allegations that she had asked unusual questions about security arrangements at the headquarters and entered areas not authorised for interns.
These accounts remain allegations reported by journalists, not established findings of a court.
One particular incident reportedly occurred on April 21, 2026.
During a mandatory evacuation following an alarm, Zhang was allegedly observed near the heavily guarded offices of the Supreme Allied Commander Europe.
The reporting also raised questions about possible irregularities in the headquarters' access-control records.
SHAPE expressly disputed that aspect of the account.
Its representatives described the access-control system as highly secure and continuously monitored, and stated that there had been no reports of suspicious activity in the system.
The denial is significant because it directly challenges one element of the published allegations.
The available public information does not resolve the disagreement.
It is also unknown what triggered the April evacuation alarm.
No publicly established evidence connects Zhang to its activation.
Belgian prosecutors described the suspected espionage as being conducted on behalf of a third country.
They did not publicly name that country.
The Globe and Mail, citing two Canadian national-security sources, reported that investigators suspected Zhang of working for China.
Follow the Money also reported suspicions involving China.
These accounts describe allegations attributed to sources. They do not establish that Zhang worked for Chinese intelligence or transferred information to Chinese authorities.
Beijing has denied involvement.
The distinction between an official allegation, a source-based report, and a proven fact remains essential.
No public trial has established the existence of an espionage relationship.
Likewise, the available record does not establish that Zhang obtained, copied, or transmitted classified NATO material.
Further allegations emerged concerning events following the police searches.
Investigators reportedly became concerned after passwords associated with Zhang's social-media accounts were changed remotely following her arrest.
Her shared accommodation in Mons was also reportedly broken into after police had searched the property.
Investigators suspected that possible accomplices might have attempted to interfere with the investigation.
Neither the identity of any alleged accomplice nor the purpose of these events has been publicly established.
In August 2026, Zhang was denied bail and remained in pretrial detention according to reporting available in October.
Pretrial detention is not a determination of guilt.
Meanwhile, NATO maintained that the investigation had not demonstrated damage to its operational readiness.
In July, SHAPE spokesperson Colonel Martin O'Donnell stated that there was no indication the matter had affected the operational readiness of NATO or SHAPE.
That statement concerned operational readiness. It did not constitute a comprehensive public accounting of any information that might have been accessed.
As of October 26, several important questions remain unresolved.
The public record does not establish whether Zhang accessed or transmitted sensitive NATO information, whether she continues to hold a Canadian security clearance, or what evidence Belgian prosecutors intend to present.
The precise outcome of a reported detention hearing scheduled for August 31 has not been independently established in the available reporting.
No substantive public response to the espionage allegations from Zhang or her legal representatives has been identified in the sources reviewed for this article.
Future court proceedings may clarify the evidence underlying the charges.
Canada's parliamentary examination may also produce additional findings about the screening process, the handling of administrative misconduct records, and the responsibilities of individual departments.
For the moment, the criminal allegations and the institutional questions must be considered separately.
Zhang is presumed innocent unless proven guilty.
The administrative fraud finding is established. The espionage allegations are not.
The Canadian government has acknowledged weaknesses in its security screening procedures, but the full consequences of those weaknesses have not yet been determined.
The Cold War ended more than three decades ago. The institutions created to manage military secrets, intelligence threats, and the possibility of insider compromise remain in operation.
In Mons, the investigation continues.
In Ottawa, the procedures that preceded it are under examination.
For now, the allegations remain unproven. The questions about the screening process do not.